no, you are right, the error with cors middleware was masking this when I tested prod settings, fixed that too now.